| Author |
Tue 70-217 Question of the Day
|
|
| wbafrank 2002-07-30, 2:30 am |
|  And today's poser is ....
Q20. Your company is currently running Active Directory and has a single domain (uk.acme.com). You would like to give certain help desk employees the ability to reset passwords for other users in your company without giving them any additional privileges. The accounts for all of these help desk employees are located in the same organizational unit (Support) and they all are members of the Help Desk Global Security Group. There are no members of the Help Desk group that you do not wish to have this ability. What would be the best way to give these users the ability to do this?
A. Add all of the user accounts from the Help Desk Global group to the Account Operators group.
B. Give the Help Desk Global Security group the "Reset User Account Passwords" right in Group Policies.
C. Add the Help Desk Global group to the Domain Admins group.
D. Add the Help Desk Global group to the Enterprise Admins group.
E. Delegate the ability to change passwords in the uk.acme.com domain to the Help Desk Global Security group.
F. Delegate the ability to change passwords in the Support OU to the Help Desk Global Security group.
Good Luck .... see you tomorrow for the answer!! | |
| Pavlov 2002-07-30, 9:12 am |
| E | |
| Slinky 2002-07-30, 10:03 am |
| Yep, it's E. | |
| robertmillar 2002-07-30, 11:31 am |
| E | |
| unreal 2002-07-30, 7:34 pm |
| I think it's 'B'. Though I'm not so sure there's such a 'policy', likely though | |
| B4yaman3 2002-07-31, 9:57 am |
| I am going with |E| | |
| wbafrank 2002-07-31, 3:19 pm |
| quote:
Originally posted by wbafrank
And today's poser is ....
Q20. Your company is currently running Active Directory and has a single domain (uk.acme.com). You would like to give certain help desk employees the ability to reset passwords for other users in your company without giving them any additional privileges. The accounts for all of these help desk employees are located in the same organizational unit (Support) and they all are members of the Help Desk Global Security Group. There are no members of the Help Desk group that you do not wish to have this ability. What would be the best way to give these users the ability to do this?
A. Add all of the user accounts from the Help Desk Global group to the Account Operators group.
B. Give the Help Desk Global Security group the "Reset User Account Passwords" right in Group Policies.
C. Add the Help Desk Global group to the Domain Admins group.
D. Add the Help Desk Global group to the Enterprise Admins group.
E. Delegate the ability to change passwords in the uk.acme.com domain to the Help Desk Global Security group.
F. Delegate the ability to change passwords in the Support OU to the Help Desk Global Security group.
And the answer is ....
Correct Answer: E
The Delegation of Control wizard in Windows 2000 allows you to grant users the ability to perform certain administrative actions without giving these users too much administrative control.
Adding the Help Desk group or its members to the Account Operators group, the Domain Admins group or the Enterprise Admins group would give the users more administrative control than asked for in the question.
Delegating the ability to change passwords in the Support OU would not achieve your objective as it would allow members of the Help Desk group to only change the passwords of users in the same OU and not other OUs. |
|
|
|